Security network slice for cloud-based wireless networks

Abstract

A method includes receiving information representative of one or more actions taken by a user equipment device connected to a cloud-native wireless network. The method also includes selecting, based on the information, the user equipment device for monitoring network traffic originating from the user equipment device. The method also includes, in response to selecting the user equipment device, assigning the user equipment device to a network slice of the cloud-native wireless network, wherein the user equipment device is assigned to the network slice upon connecting to a radio tower of the cloud-native wireless network. The method also includes routing network traffic associated with the network slice through a module of the cloud-native wireless network that monitors the network traffic.

1 . A method comprising:
 receiving information representative of one or more actions taken by a user equipment device connected to a cloud-native wireless network;   selecting, based on the information, the user equipment device for monitoring network traffic originating from the user equipment device;   in response to selecting the user equipment device, assigning the user equipment device to a network slice of the cloud-native wireless network, wherein the user equipment device is assigned to the network slice upon connecting to a radio tower of the cloud-native wireless network; and   routing network traffic associated with the network slice through a module of the cloud-native wireless network that monitors the network traffic.   
     
     
         2 . The method of  claim 1 , wherein receiving the information representative of one or more actions taken by the user equipment device comprises receiving feedback about the one or more actions taken by the user equipment device from an internet host. 
     
     
         3 . The method of  claim 1 ,
 wherein receiving the information representative of one or more actions taken by the user equipment device comprises collecting data about the one or more actions taken by the user equipment device, and   wherein selecting the user equipment device comprises determining, based on the collected data, that the one or more actions taken by the user equipment device are in violation of a contract.   
     
     
         4 . The method of  claim 1 , further comprising, in response to selecting the user equipment device, removing an assignment of the user equipment device to a network slice of the cloud-native wireless network that the user equipment device is currently assigned to. 
     
     
         5 . The method of  claim 1 , wherein assigning the user equipment device to the network slice of the cloud-native wireless network comprises assigning the user equipment device an identifier associated with the assigned network slice. 
     
     
         6 . The method of  claim 1 , wherein the user equipment device remains assigned to the network slice even as the user equipment device connects to other radio towers of the cloud-native wireless network. 
     
     
         7 . The method of  claim 1 , wherein the module of the cloud-native wireless network that monitors the network traffic also scrubs the network traffic. 
     
     
         8 . The method of  claim 1 , further comprising managing one or more characteristics of the network slice including a bandwidth of the network slice. 
     
     
         9 . (canceled) 
     
     
         10 . The method of  claim 1 , further comprising:
 selecting additional user equipment devices for monitoring network traffic originating from the additional user equipment devices, and   in response to selecting the additional user equipment devices, scaling resources of the cloud-native wireless network that are used to operate the module of the cloud-native wireless network that monitors the network traffic.   
     
     
         11 . The method of  claim 1 , further comprising:
 determining that the user equipment device no longer warrants monitoring network traffic originating from the user equipment device;   in response to determining that the user equipment device no longer warrants monitoring network traffic originating from the user equipment device, removing an assignment of the user equipment device to the network slice; and   assigning the user equipment device to another network slice.   
     
     
         12 . A wireless network comprising:
 a cloud-native core network comprising at least one computing device and a plurality of network slices;   a plurality of radio towers configured to communicate with the cloud-native core network; and   a module configured to monitor network traffic,   wherein the at least one computing device of the cloud-native core network comprises:
 a memory configured to store instructions and 
 one or more processors configured to execute the instructions to perform operations comprising:
 receiving information representative of one or more actions taken by a user equipment device connected to the wireless network, 
 selecting, based on the information, the user equipment device for monitoring network traffic originating from the user equipment device; 
 in response to selecting the user equipment device, assigning the user equipment device to a network slice of the plurality of network slices, wherein the user equipment device is assigned to the network slice upon connecting to a radio tower of the plurality of radio towers; and 
 routing network traffic associated with the network slice through the module configured to monitor network traffic. 
 
   
     
     
         13 . The wireless network of  claim 12 , wherein receiving the information representative of one or more actions taken by the user equipment device comprises receiving feedback about the one or more actions taken by the user equipment device from an internet host. 
     
     
         14 . The wireless network of  claim 12 ,
 wherein receiving the information representative of one or more actions taken by the user equipment device comprises collecting data about the one or more actions taken by the user equipment device, and   wherein selecting the user equipment device comprises determining, based on the collected data, that the one or more actions taken by the user equipment device are in violation of a contract.   
     
     
         15 . The wireless network of  claim 12 , where in the operations further comprise, in response to selecting the user equipment device, removing an assignment of the user equipment device to a network slice of the plurality of network slices that the user equipment device is currently assigned to. 
     
     
         16 . The wireless network of  claim 12 , wherein assigning the user equipment device to the network slice of the plurality of network slices comprises assigning the user equipment device an identifier associated with the assigned network slice. 
     
     
         17 . The wireless network of  claim 12 , wherein the user equipment device remains assigned to the network slice even as the user equipment device connects to other radio towers of the plurality of radio towers. 
     
     
         18 . The wireless network of  claim 12 , wherein the module configured to monitor network traffic is further configured to scrub the network traffic. 
     
     
         19 . (canceled) 
     
     
         20 . (canceled) 
     
     
         21 . The wireless network of  claim 12 , wherein the operations further comprise:
 selecting additional user equipment devices for monitoring network traffic originating from the additional user equipment devices, and   in response to selecting the additional user equipment devices, scaling resources of the cloud-native core network that are used to operate the module configured to monitor network traffic.   
     
     
         22 . The wireless network of  claim 12 , wherein the operations further comprise:
 determining that the user equipment device no longer warrants monitoring network traffic originating from the user equipment device;   in response to determining that the user equipment device no longer warrants monitoring network traffic originating from the user equipment device, removing an assignment of the user equipment device to the network slice; and   assigning the user equipment device to another network slice of the plurality of network slices.   
     
     
         23 . One or more non-transitory machine-readable storage media storing instructions that are executed to perform operations comprising:
 receiving information representative of one or more actions taken by a user equipment device connected to a cloud-native wireless network;   selecting, based on the information, the user equipment device for monitoring network traffic originating from the user equipment device;   in response to selecting the user equipment device, assigning the user equipment device to a network slice of the cloud-native wireless network, wherein the user equipment device is assigned to the network slice upon connecting to a radio tower of the cloud-native wireless network; and   routing network traffic associated with the network slice through a module of the cloud-native wireless network that monitors the network traffic.   
     
     
         24 - 33 . (canceled)